orchestration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime path uses orca orchestration check/inbox to ingest inter-agent messages from Orca’s SQLite mail store, and those messages’ --body/--payload content is authored by other agents (outsider terminals), which can include free text that the coordinator then feeds into its LLM context.